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What Is Claimed Is: 

\ 

1. A distribution information management system 

i 

having a structure comprising a data carrier attached to an 
article for storing^the information of the article, a 
distribution information processing module for reading/storing 
the information from/^n the data carrier, and a distribution 
information management module for managing the information 
relative to diatributiVn of the article, 
^1 the distributUon information processing module 

^ comprising: 

a reading part\that reads out the data of the data 

carrier; 

a storing part th^t stores the information in the data 

carrier ; 

a first InformatioVi verification unit that verifies 



'^J the information read out froiA^ the data carrier; 

an information generating unit that processes the 
Information to be stored in thA data carrier; and 

a first communication part that communicates with the 
distribution information management module, 

the first information verification unit comprising: 

a first Information verification part that verifies 
the information read out from the data carrier; and 

a first verification key storage part that stores the 
verification k y used by the first Information verification part 
for verification of the information, anc 
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the information generating unit comprising: 

a distributionVnformacion generating part that 
generates the information Vo be stored in the data carrier; 

a signature module that performs signature generating 
process; \ 

a signature key storage part that stores the signature 
key information used by the signature module for generating an 
digital signature; \ 

a signature key inflarmation selection part that 
selects a signature key informaition stored in the signature key 
storage part; and I 

a signature key infdrmation acquisition part that 
acquires the signature key information from the distribution 
information management module, \ 

the signature module Comprising: 

a signature part that g^fierates an digital signature 
for the information generated by the distribution information 
generating part; and \ 

a first signer private information storage part that 
stores signer private information usted by the signature part 
for generating a digital signature; rind 

the distribution information management module 

comprising: \ 

a second communication part that communicates with 
the distribution information processing Uodule; 

a second information verification unit that processes 
the information received from the distribution information 
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\ 

processing xnodu^le; and 

a Bignature key information generating unit that 
proceBses the signature key information to be sent to the 
distribution information processing moduXe; 

the Beconc^inf ormation verification unit comprising: 
a second In^formation verification part that verifies 
the information received from the distribution information 
processing module; and^ 

a second verification key storage part that stores 
^1 the verification key used by the second information verification 

f|l part for verification of\ the information, 

fa the signature key Information generating unit 

m 



as ; 



comprising : 



a signature key information generating part that 
generates a signature key information used by the distribution 
information processing module for generating a distribution 



^1 information; 



a signature key storage part that stores the signature 
key used by the signature key information generating part for 
generating signature key information; 

a signer private information selection part that 
selects signer private Inf ormatiom used by the signature key 
information generating part for gerr^rating signature key 
Information; and 

a second signer private Information storage part that 
stores the signer private information. 

2. The distribution Informatiok management system 
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according to claim 1, wherein the signature module la detachable 
from the distribution Information proceaalng module* 

3. The distribution Information management system 
according co claim 1,, wherein the signature module la 
tamperproof. 

4. The distribution information management system 
according to claim 1, wherein the information generating unit 
has a signature key use\ limit information storage part, the 
signature key Informaclon selection part does not select 
signature key information used more than a specified number of 
times for signature. \ 

5. The distribution information management system 
according co claim 1, wherein the signature key use limit 
information storage part is dlspoaed in che signature module. 

6. The distrlbutloA informaclon management system 
according to claim 1, wherein Vhe distribution information 
processing module comprises: \ 

an Information verifioation module; and 

an Information generating module* 

the information verif legion module comprises: 

a first reading part that reads the data of the data 

carrier, and \ 

a first information verification unit that processes 

the information read out from the data >carrler , 

the informaclon generating modUle comprises: 

a second reading part that read the data of the data 

carrier; \ 



a storing part that stores the Information in the data 
carrier; and 

an information generating unit that processes the 
information to be scored in the data carrier. 

7. The distribution information management system 
according to claim 1, wherein 

the distribution \Lnformation management module 

comprises : 

a second informatllon verification module; and 
a signature key information generating module, and 
the second information verification module 

comprises : 

a distribution information verification unit; and 
a second communicationX part« and 
the signature key infoxipation generating module 

comprises : 

a signature key generatizig part; and 
a third communication part 

8. The distribution information management system 
according to claim 1, wherein the verMication key stored in 
the first verification key storage part and the second 
verification key storage part is common for all the distribution 
information processing modules and distribution information 
management modules. 

9. The distribution information Aianagement system 
according to claim 1. wherein the first information verification 
part and the second information verification part perform the 



same procees. 

10. The distribucion Information management system 
according to claim 1 , wherein the first information verification 
unit has a first verification key selection part that selects 
the verification key used by the first information verification 
part . ^ 

11. The distribution information management system 
according to claim 9« wherein the second information 
verification unit has a second! verification key selecting part 

^ chac selects che verification key used by the second information 
verification part, \ 

12. The diatributlon\ information management system 
according to claim 1, wherein the signature key information 
generating unit has a signature key selection part that selects 
a signature key. \ 

13 The distribution information management system 
according to claim 1. wherein the Information stored in the data 
carrier comprises at least a produce Identifier, a signer 
identifier, a receiver identifier, and a signature value, and 
which information is stored as one unit. 

14. The distribution information management system 
according to claim 13, wherein the Infbrmatlon stored in the 
data carrier contains at least a verification key Identifier, 
and which information is stored as one unit. 

15. The distribution information management system 
according to claim 11, wherein the information stored in the 
data carrier contains at least a distribution information 



management module identifiert and which Information is stored 
aa one unit. 

16. The difltribi^tion information management syatem 
according co claim 1, wherein the information stored in the data 
carrier contains at least a\ product identifier, a signer 
identifier, and a receiver identifier and which information is 
scored as one unit, and the ^formation has a signature value 
separately from the information for unit. 

17. The distribution information management system 
according co claim 1* wherein the information stored in the data 
carrier contains ac least a product identifier, a signer 
identifier, a receiver identilUer, and a verification key 
identifier and which informatiok is stored as one unit, and the 
information has a signature va31ue corresponding to the 
verification key identifier for Wach verification identifier. 

18. A data carrier attached to an article for storing 
the information of the article that stores: 

distribution information of the article generated for 
each one or one sec of transaction \n the distribution process 
of the article; and 

at least a pare of signatVire value of at least part 
of a piece of the distribution informacion or at least part of 
each of serial pieces of the distribution inf oxrmaclon. 

19. The data carrier according to claim IS, wherein 
Che distribution information of the article contains at lease 
the identifier of the article, che identifier of th receiver 
who received the article, and the identiVfi r of the signer who 
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V 

gen rates the signature value. 

20. A distribution information processing module that 
reads/stores the information out/in a data carrier attached to 
an article for storing t\e Information relative to the article 
and communicates the information with a distribution 
information management module for managing the information 
relative to distribution of the article to process the 
information relative to th|e article, 

the distribution! Information processing module 
comprising: 

a reading part th^t reads out the data of the data 

carrier; 

a storing part that iftores the information in the data 

carrier; 

a first information Verification unit that verifies 
the information read out from tne data carrier; 

an information generating unit that processes the 
information to be stored in the data carrier; and 

a first communication part that communicates vlth the 
distribution information management module, 

the first information verlTfication unit comprising: 

a first information verif ioation part that verifies 
the information read out from the datk carrier; and 

a first verification key storkge part that stores the 
verification key used by the first information verification part 
for verification of the Information, anc 

the information generating unit comprising: 
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a distribution information generating part that 
generates the information to be stored in the data carrier; 

a signature module chat performs signature generating 

process ; 

a signature key storage part chat scores the signature 
key information used by the signature module for generating a 
digital signature; 

a signature key \inf ormation selection pare that 
selects signature key infoxr^ation stored in the signature key 
storage part; and 

a signature key information acquisition pare that 
acquires the signature key inyorznation from the distribution 
information management module < 

the signature module\ comprising ; 

a signacure part that \generates a digital signacure 
for the information generated by\the distribution information 
generating part; and 

a f irac signer private iiiformation storage pare chac 
stores signer private information used by the signature part 
for generating a digital signature A 

21. A distribution information management module that 
reads/stores the information out/in a^ata carrier attached to 
an article for storing che information Velacive to the article 
and communicates the information with a distribution 
information processing module for proceasing the information 
relative to distribution of the article to manage the information 
relative to the article, 
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th dlBtAbution information management module 
comprising : 

a communication part that communicates with the 
distribution information processing module; 

an information verification unit that processes the 
information received from the distribution information 
processing module; and 

a signature key \inf ormation generating unit that 
processes the signature kei information to be sent to the 
distribution information processing module, 

the information verification unit comprising: 

a information verification part that verifies the 
information received from the\distribucion information 
processing module; and 

a verification key stbrage part that stores the 
verification key used by the information verification part for 
verification of the information, 

the signature key information generating unit 

comprising: 

a signature key information generating part that 
generates signature key information ^sed by the distribution 
information processing module for generating distribution 
information; 

a signature key storage part that stores the signature 
key used by the signature key information Venerating part for 
generating signature key information; \ 

a signer private information selecti n part that 
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selects signer private information used by che signature key 
information generating part for generating signature key 
information; and 

a signer private information storage part that stores 
the signer private information - 

22. A distribution information processing method by 
use of a data carrier Attached to an article for storing the 
information relative to the article, a distribution information 
processing module for reading/storing the information from/in 
the data carrier, and a distribution information management 
module for managing the information relates to the distribution 
of the article, wherein 

the distribution^ information processing method 

comprises : 

a reading step for\ reading out the data of the data 

carrier; 

a storing for storirjg the information in the data 

carrier; 

a first information v^if ication step for verifying 
the information read out from the data carrier; 

an information generatiVig step for processing the 
information to be stored in the data carrier; and 

a first communication step\f or communicating with the 
distribution information management module, 

che first information verification step comprises: 
a first information verification sub-step for 
verifying the information r ad out fr m the data carrier; and 
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a f irat verification key storage sub-step f r scoring 
the verification key used xn the first information verification 
sub-step for verification Vf the information, and 

the information generating step comprises; 

a distribution information generating sub -step for 
generating the information tL be stored in the data carrier, 

a signature sub-stfcp for performing signature 
generating process; \ 

a signature key storaWe step for storing the signature 
key Information used in the si^Jiature sub -step for generating 
a digital signature; \ 

a signature key information selection step for 
selecting a signature key informAtion stored in the signature 
key storage sub -step; and 

a signature key information acquisition sub- step for 
acquiring the signature key inforraaYion from the distribution 
Information management module, 

the signature sub- step con9brlses 

a signature micro- step for generating a digital 
signature for the Information generac^ by the distribution 
Information generating module; and 

a first signer private information storage micro- 
step for storing a signer private information used in the 
signature micro- step for generating a distal signature. 

23. A distribution information management method by 
use of a data carrier attached to an articlXe for storing the 
information relative to the article, a distribution information 
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processing module for reading/storing the information from/in 
the data carrier, and a distribution information management 
module for managing the information relative to the distribution 
of Che article, wherein \ 

the distribution information management method 

comprises : \ 

a communication \step for communicating with the 
distribution information ptocessing module; 

an information verification step for processing the 
information received from the distribution information 
processing module; and \ 

a signature key information generating step for 
processing the signature key information to be sent to the 
distribution information processing module, 

the information verification step comprises: 

an information verification sub -step for verifying 
the information received from this distribution information 
processing module; and \ 

a verification key storage sub -step for storing the 
verification key used in the information verification sub -step 
for verification of the inf ormacionV 

the signature key information generating step 
comprises: \ 

a signature key information generating sub- step for 
generating a signature key information u^d by the distribution 
information processing module for generating a distribution 
inf rmation, \ 
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a signature Jcey storage sub-step for storing the 
signature key used in the signature key information generating 
sub-Btep for generating\ signature key inforwation; 

a signer privaVe information selection sub- step for 
selecting a signer private information used in the signature 
key information generating sub -step for generating signature 
key information; and« 

a signer privatelinf ormation storage sub- step for 
storing the signer private information, 

24. A computer program product for distribution 
information processing used for managing the distribution 
information by use of a data carrier attached to an article for 
storing the information relati^re to the article, a distribution 
information processing module tfor reading/storing the 
information from/in the data cdrrier, and a distribution 
information management module fAr managing the information 
relative to the distribution of «ie article, wherein 

a computer executes a process comprising: 

a reading step for reading out the data of the data 

carrier; 

a storing step for storing ti^e information in the data 

carrier; 

a first information verification step for verifying 
the information read out from the data\ carrier ; 

an information generating step for processing the 
information to be stored in the data carrier; and 

a first communication step for cdmmunicating with the 
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distribution inform^ion management module, 

the first information verification step comprises: 
a first infbrmation verification sub- step for 

verifying the information read out from the data carrier; and 
a first verification key storage sub- step for storing 

the verification key uaedUn the first information verification 

sub -step for verification of the information, and 

the information^ generating step comprises: 

a distribution iWformation generating sub- step for 

generating the inf ormation\ to be stored in the data carrier; 
a signature aub-s\tep for performing signature 

generating process; 

a signature key storage step for storing the signature 
key information used in the signature sub- step for generating 
a digital signature; 

a signature key information selection step for 
selecting a signature key inf orifiation stored In the signature 
key storage sub -step; and 

a signature key information acquisition sub- step for 
acquiring the signature key Info^ation from the distribution 
information management module « 

the signature sub -step Comprises; 

a signature micro- step flor generating a digital 
signature for the information genel^ated by the distribution 
information generating module; and 

a first signer private information storage micro- 
step for St ring signer private information used in the signature 
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micro -step for generating a digital signature. 

25, A computer program product for distribution 
Information management used for managing the distribution 
information by use of a\data carrier attached to an article for 
storing the information relative to the article, a distribution 
information processing niodule for reading/storing the 
Information from/in the data carrier, and a distribution 
information management module for managing the information 
relative to the discributiW of the article, wherein 

a computer executes a process comprising: 

a communication step for communicating with the 
distribution Information prc^cessing module; 

an information verification step for processing the 
information received from the\distributlon Information 
processing module; and \ 

a signature key information generating step for 
processing the signature key infiorraation to be sent to the 
distribution information processing module, 

the information verificktion step comprises: 

an information verification sub-step for verifying 
the information received from the distribution information 
processing module; and \ 

a verification key storage dub-step for storing the 
verification key used in the inforroatioA verification sub^step 
for verification of the information, \ 

the signature key information generating step 

comprises : 
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a signature k,ey information generating sub- step for 
generating signature )cey. information used by the distribution 
information processing niodule for generating distribution 
information; \ 

a signature key\ storage sub- step for storing the 
signature key used in the signature key information generating 
sub- step for generating signature key information; 

a signer private Information selection sub- step for 
selecting a signer private information used by the signature 
key information generating pl^rt for generating a signature key 
information; and 

a signer private lAformation storage sub -step for 
storing the signer private information. 

26. A distribution informacion management system 
having the acructure comprising\a data carrier attached to an 
article for storing the information of the article, a 
distribution information proceesinla module for reading /storing 
the information from/in the data ckrrier. and a distribution 
information management module for irtanaging the information 
relative to distribution of the article, 

the distribution informatic^n processing module 

comprising: 

a reading part that reads ou^ the data of the data 

carrier; 

a storing part that stores the information in the data 

carrier; \ 

a first information verlf icacioa unit that verifies 
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the information read out from the data carrier; 

an information generating unit that processes the 
information to be storedVn the data carrier; and 

a first communicant ion part that communicates with the 
distribution information management module. 



the first information verification unit comprising: 
an information verification part that verifies the 
information read out from the data carrier'; and 

a verification key Storage part that stores the 
verification key used by the f Irfat information verification part 
for verification of the informktion, and 

the information generating unit comprising: 
a distribution Informktion generating part that 
generates the Information to be Wored in the data carrier; 

a signature module that ^rf orms signature generating 

process; 

a signature key storage pa^t that stores the signature 
key information used by the signaturdy module for generating an 

digital signature; 

a signature key informatlon\ selection part that 
selects signature key Information store^ in the signature key 

storage part; and 

a signature key information acquisition part that 
acquires the signature key Information frl^m the distribution 
information management module, 

the signature module comprising: 

a signature part that g nerates a digital signature 
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for the information generated by the distribution Information 
generating part; and \ 

a firet signer private information storage part that 
stores a signer private information used by the signature part 
for generating a digital \signature. and 

the distribution information management module 

comprising: \ 

a second communifcacion part that communicates with 

the distribution information processing module; and 

a signature key information generating unit that 

processes the signature key information to be sent to the 

distribution information proAeeaing module, 

the signature key information generating unit 

comprising: \ 

a signature key information generating part that 
generates signature key information used by the distribution 
information processing module for\ generating distribution 
information; \ 

a signature key storage paAt chat stores the signature 
key used by the signature key information generating part for 
generating signature key informations 

a signer private informatioh selection part that 
selects a signer private information usdd by the signature key 
information generating part for generating signature key 
information; and \ 

a second signer private Information storage part that 

stores the signer private information. \ 



86 



27. A diatributi n information management system 
having the structure comprising a data carrier attached to an 
article for storing the information of the article, a 
distribution information processing module for reading /storing 
the information from/in tie data carrier, and a distribution 
information management module for managing the information 
relative to distribution of^the article, 

the distribution information processing module 

comprising; \ 

a storing pare that stores the information in the data 

carrier; \ 

an information generating unit that processes the 
information to be stored in the data carrier; and 

a first communication part that communicates with the 
distribution information management module, and 

the Information generating unit comprising: 

a distribution information generating part that 
generates the information to be stdred in the data carrier; 

a signature module that perfbrms signature generating 

process ; 

a signature key storage part tnat scores the signature 
key Information used by the signature module for generating a 
digital signature; 

a signature key information serection part that 
elects signature key information stored in\the signature key 
storage part; and 

a signature key information aequisi^tion part that 
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acquires the signature k y information from the distribution 
information management module, 

the signacune module comprising: 

a signature part that generates a digital signature 
for the information generated by the distribution information 
generating part; and \ 

a first signer private information storage part that 
stores signer private information used by the signature part 
for generating a digital siWature; and 

the distribution information management module 

compriaing: 

a second communication part that communicates with 
the distribution information processing module; 

an information verification unit that processes the 
information received from the dli^tribution information 
processing module; and 

a signature key information generating unit that 
processes the signature key information to be sent to the 
distribution information processing module; 

the information verification unit comprising: 

an information verification bare that verifies the 
information received from the distribution information 
processing module; and 

a verification key storage part\ that stores the 
verification key used by the information verification part for 
verification of the information, 

the signature k y informati n genei\ating unit 
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comprising: \ 

a signature key information generating part that 
generates signatUM key information used by the distribution 
information processing module for generating distribution 
information; \ 

a signatureUcey storage part that stores the signature 
key used by the eignacure key information generating part for 
generating a signature key information, 

a signer prive^te information selection part that 
selects signer private ink>rmation used by the signature key 
information generating par^ f or generating signature key 
information; and 

a second signer priv^^te information storage part that 
stores the signer private information, 
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